License Agreement Offer

Version dated August 14, 2026

for the right to use the “OneKYC” software

This License Agreement (the “Agreement”) constitutes an offer by the Company Finext Technology Ltd (the “Licensor”) to any legal entity or individual (including an individual entrepreneur), (the “Licensee”).

The Agreement is deemed concluded and becomes effective upon its acceptance by the Licensee. Acceptance means (i) payment of the license fee and/or (ii) the Licensee’s commencement of use of the “OneKYC” software—whichever occurs first.

Use of “OneKYC” signifies the Licensee’s consent to the terms of the Agreement.

1.1. OneKYC is a B2B SaaS platform and technical infrastructure for remote identity verification, document verification, selfie/liveness, face match, AML/sanctions/PEP checks, manual review, generation of statuses, reason codes, risk signals, reports, and audit logs, intended for collection, analysis, and intelligent processing of information about individuals, legal entities, individual entrepreneurs and/or related compliance check data (KYC/AML), within the functionality of the selected Pricing Plan.

1.2. Order is a document (an integral part of the Agreement) reflecting the set of Pricing Plans, the cost of licenses/subscriptions, modules, API licenses, services and works. The current version of the Order is published on the Licensor’s website/in the OneKYC interface or is provided upon request. The Licensor may unilaterally amend the Price List and/or the composition of Pricing Plans by publishing a new version unless otherwise agreed by the Parties in the invoice/order.

1.3. End User is a legal entity or individual entrepreneur, an affiliate of the Licensee, for whose benefit the Licensee purchases and uses OneKYC and to whom the Licensee has granted access to the Platform. The Licensee is responsible for communicating the terms of the Agreement to End Users and for their compliance with the terms of use.

If the Agreement is concluded for the benefit of End Users, then unless expressly stated otherwise, the terms of the Agreement apply to the Licensee and the End Users equally.

1.4. List of End Users is specified in the invoice/order/appendix. Such list forms part of the Agreement if the Licensee also acts for the benefit of End Users.

1.5. Pricing Plan means a set of functionality and the scope of rights to use OneKYC (including limitations on the number of users, request limits, available modules/data, API, etc.) as determined by the Price List and/or the invoice/order.

1.6. API means an Application Programming Interface for integrating OneKYC with the Licensee’s information systems.

1.7. Developer key means a unique alphanumeric access code to the OneKYC API.

1.8. API license means a non-exclusive right to use OneKYC via the API within the selected Pricing Plan/Price List.

1.9. User means an individual authorized by the Licensee (or an End User) to access and work in OneKYC.

2.1. The Licensor grants the Licensee a simple (non-exclusive), limited, revocable, non-transferable (unless otherwise expressly agreed) license to use OneKYC within the selected Pricing Plan and the terms of this Agreement during the term of the Order, solely for the Licensee’s internal business purposes related to KYC/KYB, integration and onboarding processes, fraud prevention, screening persons for compliance with local and international laws, and verification workflows, and the Licensee undertakes to accept and pay for the granted rights.

The Parties may execute one or more Orders. The Order specifies the connected services, countries, estimated verification volume, cost, storage model, retention period, integrations, support level and other parameters.

2.2. Subject to receipt of 100% payment under the invoice/order, the Licensor grants the right to use OneKYC in the manner specified in the Order and for the term agreed in the Order.

2.3. Additional services/works (implementation, configuration, training, consulting, etc.) are provided for a fee in accordance with the Order.

2.4. OneKYC is intended for use in entrepreneurial/professional activities. If consumer protection rules are mandatory in the Licensee’s country, such rules apply to the extent they cannot be excluded by agreement of the parties.

2.5. If the Licensee purchases a specialized plan for entities regulated for AML/CFT and confirms compliance with applicable law, the Licensor may, upon discovering that such assurances are false, suspend access and/or terminate the Agreement.

3.1. Exclusive rights to OneKYC, documentation, interfaces, databases, design, trademarks and other IP objects belong to the Licensor and/or its right holders/licensors.

3.2. No ownership rights to OneKYC are transferred to the Licensee; only the right of use within the scope of this Agreement is granted.

4.1. The Licensor warrants that it has the authority to grant the license under this Agreement.

4.2. The Licensor notifies that it may use third-party data sources/providers; the Licensor is not the owner of such sources and does not warrant their completeness/up-to-dateness outside the scope expressly stated in the SLA/service description (if any).

4.3. The Licensee independently ensures Internet access and compatibility of its infrastructure with OneKYC requirements.

4.4. The scope of the granted right to use OneKYC depends on the selected Pricing Plan.

4.5. Territory: worldwide, unless otherwise expressly restricted by export control/sanctions/prohibitions of applicable law.

4.6. OneKYC is provided only to the Licensee and (if applicable) End Users without the right to transfer to third parties, sublicense, lease/rent/outsource access, unless the Licensor gives written consent.

4.7. OneKYC is provided “AS IS” to the maximum extent permitted by applicable law. The Licensor does not warrant that OneKYC fully meets the Licensee’s expectations/purposes.

4.8. Methods of use:

a) reproduction of the OneKYC interface on the User’s device screen;

b) integration with the Licensee’s systems via the API and/or integration modules, provided an appropriate license is obtained.

4.9. Availability (general clause): the service is provided 24/7, except during scheduled maintenance. SLA parameters may be set separately.

5.1. Licensor’s Obligations

5.1.1. maintain the operability of OneKYC within the selected Pricing Plan;

5.1.2. not perform actions that prevent normal use of OneKYC provided the Licensee complies with the Agreement;

5.1.3. maintain the confidentiality of the Licensee’s information within Section 8;

5.1.4. provide the Licensee with documents evidencing provision of services/rights in electronic form (invoice/act/certificate/license provision confirmation) in a form and manner reasonably acceptable for international commerce (e-signature/scan/EDI), unless otherwise agreed.

5.2. Licensor’s Rights

5.2.1. modify/update OneKYC (including adding/removing features) provided that equivalent functionality is maintained within the Pricing Plan, or the Licensee is notified if changes are material;

5.2.2. suspend access in case of breach of the Agreement, security threats, suspected abuse (including exceeding limits/circumventing restrictions);

5.2.3. refuse to provide the service if required by applicable law (sanctions, export control, government decisions, etc.)

5.3. Licensee’s Obligations

5.3.1. pay invoices/orders on time;

5.3.2. not copy, modify, decompile/disassemble OneKYC, except where expressly permitted by applicable law and cannot be prohibited by contract;

5.3.3. independently perform integration of its systems with OneKYC if implementation services were not purchased separately;

5.3.4. not provide OneKYC to third parties (rental, leasing, timesharing, service bureau, etc.) without the Licensor’s written consent;

5.3.5. ensure Users’ compliance with the Agreement;

5.3.6. use test keys/environments (if provided) during testing stages;

5.3.7. provide the Licensor with information necessary to perform the Agreement (contacts, user list, details, etc.);

5.3.8. notify End Users of the rules of use (if applicable). Use of OneKYC by a person not included in the agreed list/limit is deemed a breach.

5.4. Licensee’s Rights

5.4.1. use OneKYC within the Pricing Plan;

5.4.2. submit suggestions for improving OneKYC (without the Licensor being obliged to implement them);

5.4.3. not provide usage reports unless otherwise required for limits/billing calculations.

6.1. The license fee and service prices are determined by the Order. Unless otherwise stated, all amounts are stated exclusive of taxes.

6.2. Taxes:

a) the Licensee pays all applicable taxes, duties and charges (including VAT/GST/sales tax) except taxes on the Licensor’s income;

b) if the reverse charge mechanism applies, the Licensee independently fulfills the relevant tax obligations;

c) if withholding tax is required by law, the Licensee (i) withholds/pays it properly and (ii) where possible provides documents to apply double taxation treaty (DTT) benefits, and also cooperates with the Licensor to minimize withholding to the extent lawful.

6.3. Invoice payment term is 5 business days from receipt date unless another term is specified in the invoice/order.

6.4. Payment currency is determined by the Parties in the Order. Correspondent bank fees are borne by the payer unless otherwise agreed.

6.5. The payment obligation is deemed fulfilled on the date funds are credited to the Licensor’s account.

6.6. Documents may be sent by email, via EDI/electronic document interchange, or in another agreed manner. Electronic records, electronic signatures and electronic communications may be used and shall have legal effect to the extent provided by the Electronic Transactions Law, DIFC Law No. 2 of 2017, as amended from time to time.

6.7. Acceptance (deemed acceptance): if the Licensee does not send a reasoned refusal within 10 business days from provision of access (for license/subscription) and/or from delivery of the result of services/works, the rights/services are deemed accepted in full.

6.8. After expiration of the period for a reasoned refusal, paid amounts are non-refundable, except where expressly required by mandatory applicable law or separately agreed in the order.

7.1. The Agreement is effective from acceptance until full performance of the Parties’ obligations or until the end of the paid license/subscription term.

7.2. The date in the heading is the publication/revision date if the Agreement is used as a public offer; the date of conclusion with a specific Licensee is determined by the moment of acceptance.

7.3. The Licensor may update the Agreement terms by publishing a new version. The version in effect at the time of acceptance/payment applies unless otherwise required by mandatory law or expressly agreed. For subscription services, applying a new version from the next renewal period is permitted subject to prior notice.

7.4. In the event of a material breach, the Licensor may suspend access and/or terminate the Agreement unilaterally by notice, unless a different procedure is required by applicable law.

7.5. If the Agreement is concluded for the benefit of End Users, the Licensor and the Licensee may amend/terminate the Agreement without End Users’ consent unless otherwise required by mandatory law.

8.1. Each Party undertakes to keep confidential the other Party’s information obtained in connection with the Agreement and to use it only to perform the Agreement.

8.2. The fact of concluding the Agreement is not confidential unless otherwise agreed in writing.

8.3. The Parties are liable in accordance with the Agreement and applicable law.

8.4. The Licensor is not responsible for inability to use OneKYC for reasons beyond the Licensor’s control (including the Internet/Licensee’s infrastructure).

8.5. The Licensor does not guarantee completeness/accuracy of data in external sources and is not liable for the Licensee’s decisions made based on OneKYC information.

8.6. The Licensor is not liable for the Licensee’s incorrect interpretation of information.

8.7. Limitation of liability: to the maximum extent permitted by applicable law, the Licensor is not liable for indirect/incidental/punitive damages, lost profits, loss of data, loss of reputation, business interruptions.

8.8. Liability cap: the Licensor’s aggregate liability under the Agreement is limited to the amount paid by the Licensee for OneKYC (and related services/works) for the last 12 months preceding the event giving rise to liability, unless otherwise required by mandatory law.

8.9. Force majeure: the Parties are released from liability for non-performance due to force majeure. The Party invoking force majeure shall notify the other Party within a reasonable time.

9.1. Roles and applicable data protection law: where the Licensee uploads or otherwise processes Personal Data through OneKYC, the Licensee will generally act as Controller and the Licensor as Processor, unless the nature and purposes of the relevant Processing require a different allocation of roles. To the extent applicable, such Processing shall be governed by the Data Protection Law, DIFC Law No. 5 of 2020, and the DIFC Data Protection Regulations, as amended from time to time.

9.2. The Licensor, acting as Processor, processes Personal Data only on the Licensee’s documented instructions and solely for the purposes of performing this Agreement, unless Processing is otherwise required by Applicable Law.

9.3. Security: the Licensor applies appropriate technical and organisational measures (TOMs) taking into account the nature, scope, context and purposes of Processing and the risks to the rights of Data Subjects.

9.4. Sub-processors: the Licensor may engage Sub-processors subject to the Licensee’s prior specific or general written authorisation and provided that the Licensor imposes on each Sub-processor data protection obligations substantially equivalent to those applicable to the Licensor under this Agreement and Applicable Law. The Licensor remains responsible for the performance of its Sub-processors to the extent required by Applicable Law.

9.5. Incidents: after becoming aware of a Personal Data Breach affecting Personal Data processed on behalf of the Licensee, the Licensor shall notify the Licensee without undue delay and provide the information reasonably necessary for the Licensee to comply with its notification and other obligations under Applicable Law.

9.6. Cross-border transfers: where the DIFC Data Protection Law applies, transfers of Personal Data outside the DIFC shall be carried out in accordance with Articles 26 and 27 of the Data Protection Law, DIFC Law No. 5 of 2020, and the DIFC Data Protection Regulations, including, where required, on the basis of an adequate level of protection, appropriate safeguards or standard contractual clauses approved by the DIFC Commissioner of Data Protection. Where GDPR, UK GDPR or another mandatory data protection regime additionally applies, the Parties shall also comply with the applicable transfer requirements under that regime.

9.7. Data Processing Agreement (DPA): where required by Applicable Law or the nature of the Processing, the Parties shall enter into a separate DPA, or incorporate the required data processing terms into an Order or appendix, including the mandatory Processor terms required under Article 24 of the Data Protection Law, DIFC Law No. 5 of 2020.

10.1. Each Party represents that it is duly established/registered, has authority to enter into and perform the Agreement.

10.2. Sanctions and export control: the Licensee represents that use of OneKYC does not violate applicable sanctions regimes and export control rules. The Licensor may refuse/suspend provision of OneKYC if required to comply with such rules.

10.3. Anti-corruption: the Parties undertake to comply with applicable anti-corruption laws (e.g., the UK Bribery Act, FCPA-where applicable).

11.1. This Agreement and any non-contractual obligations arising out of or in connection with it shall be governed by and construed in accordance with the laws and regulations of the Dubai International Financial Centre (DIFC), including the Contract Law, DIFC Law No. 6 of 2004, as amended from time to time, together with any mandatory laws of the United Arab Emirates applicable in the DIFC. Conflict-of-law rules that would result in the application of the law of another jurisdiction are excluded to the fullest extent permitted by Applicable Law.

11.2. Any dispute, difference, controversy or claim arising out of or in connection with this Agreement, including any question regarding its existence, validity, interpretation, performance, breach, termination, discharge or applicable remedies, shall be subject to the exclusive jurisdiction of the Courts of the Dubai International Financial Centre (DIFC Courts), and each Party irrevocably submits to such jurisdiction.

11.3. Notices: shall be sent to the email addresses and/or postal addresses specified in the order/account and are deemed delivered under the rules specified in the order/appendix.

11.4. Assignment: the Licensee may not assign rights/obligations without the Licensor’s written consent; the Licensor may assign/transfer the agreement within its group of companies upon notice to the Licensee.

11.5. Severability: invalidity of part of the terms does not affect the validity of the remaining terms.

11.6. Entire agreement: the Agreement, Orders, invoices and appendices constitute the entire agreement.